kobako 0.28.0 → 0.30.0

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kobako
 version: !ruby/object:Gem::Version
-  version: 0.28.0
+  version: 0.30.0
 platform: ruby
 authors:
 - Aotokitsuruya
@@ -13,16 +13,22 @@ dependencies:
   name: msgpack
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.8.2
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '1.7'
+        version: '2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.8.2
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '1.7'
+        version: '2'
 - !ruby/object:Gem::Dependency
   name: rb_sys
   requirement: !ruby/object:Gem::Requirement
@@ -59,12 +65,70 @@ files:
 - crates/kobako-runtime/Cargo.toml
 - crates/kobako-runtime/README.md
 - crates/kobako-runtime/src/dispatch.rs
+- crates/kobako-runtime/src/endpoint.rs
+- crates/kobako-runtime/src/endpoint/buffer.rs
+- crates/kobako-runtime/src/endpoint/capture.rs
+- crates/kobako-runtime/src/endpoint/dispatch.rs
+- crates/kobako-runtime/src/endpoint/invoke.rs
+- crates/kobako-runtime/src/endpoint/memory_cap.rs
 - crates/kobako-runtime/src/error.rs
+- crates/kobako-runtime/src/filesystem.rs
+- crates/kobako-runtime/src/filesystem/bind.rs
+- crates/kobako-runtime/src/filesystem/bind/fid.rs
+- crates/kobako-runtime/src/filesystem/bind/lookup.rs
+- crates/kobako-runtime/src/filesystem/bind/walk.rs
+- crates/kobako-runtime/src/filesystem/overlay.rs
+- crates/kobako-runtime/src/filesystem/overlay/file.rs
+- crates/kobako-runtime/src/filesystem/overlay/inode.rs
+- crates/kobako-runtime/src/filesystem/overlay/path.rs
+- crates/kobako-runtime/src/filesystem/overlay/stack.rs
+- crates/kobako-runtime/src/filesystem/overlay/stack/copy_up.rs
+- crates/kobako-runtime/src/filesystem/overlay/stack/dir.rs
+- crates/kobako-runtime/src/filesystem/overlay/stack/namei.rs
+- crates/kobako-runtime/src/filesystem/overlay/stack/readdir.rs
+- crates/kobako-runtime/src/filesystem/path.rs
+- crates/kobako-runtime/src/filesystem/pipe.rs
+- crates/kobako-runtime/src/filesystem/rdir.rs
+- crates/kobako-runtime/src/filesystem/tmpfs.rs
+- crates/kobako-runtime/src/filesystem/tmpfs/tmpfile.rs
+- crates/kobako-runtime/src/filesystem/tmpfs/whiteout.rs
+- crates/kobako-runtime/src/filesystem/tmpfs/xattr.rs
+- crates/kobako-runtime/src/filesystem/wrap.rs
+- crates/kobako-runtime/src/grant.rs
+- crates/kobako-runtime/src/hashtable.rs
 - crates/kobako-runtime/src/lib.rs
+- crates/kobako-runtime/src/locking.rs
+- crates/kobako-runtime/src/locking/seqlock.rs
+- crates/kobako-runtime/src/mount.rs
 - crates/kobako-runtime/src/profile.rs
 - crates/kobako-runtime/src/runtime.rs
+- crates/kobako-runtime/src/sched.rs
+- crates/kobako-runtime/src/security.rs
 - crates/kobako-runtime/src/snapshot.rs
+- crates/kobako-runtime/src/vfs.rs
+- crates/kobako-runtime/src/vfs/attr.rs
+- crates/kobako-runtime/src/vfs/cred.rs
+- crates/kobako-runtime/src/vfs/dentry.rs
+- crates/kobako-runtime/src/vfs/errno.rs
+- crates/kobako-runtime/src/vfs/file.rs
+- crates/kobako-runtime/src/vfs/inode.rs
+- crates/kobako-runtime/src/vfs/kern_path.rs
+- crates/kobako-runtime/src/vfs/mount.rs
+- crates/kobako-runtime/src/vfs/namei.rs
+- crates/kobako-runtime/src/vfs/openat2.rs
+- crates/kobako-runtime/src/vfs/path.rs
+- crates/kobako-runtime/src/vfs/readdir.rs
+- crates/kobako-runtime/src/vfs/stat.rs
+- crates/kobako-runtime/src/vfs/super_block.rs
+- crates/kobako-runtime/src/vfs/utimes.rs
 - crates/kobako-runtime/src/yielder.rs
+- crates/kobako-runtime/tests/linux_baseline/calls.rs
+- crates/kobako-runtime/tests/linux_baseline/concurrent.rs
+- crates/kobako-runtime/tests/linux_baseline/kobako.rs
+- crates/kobako-runtime/tests/linux_baseline/linux-baseline-expected.txt
+- crates/kobako-runtime/tests/linux_baseline/linux.rs
+- crates/kobako-runtime/tests/linux_baseline/main.rs
+- crates/kobako-runtime/tests/linux_baseline/permissions.rs
 - crates/kobako-transport/CHANGELOG.md
 - crates/kobako-transport/Cargo.toml
 - crates/kobako-transport/README.md
@@ -89,22 +153,41 @@ files:
 - crates/kobako-wasmtime/src/abi.rs
 - crates/kobako-wasmtime/src/ambient.rs
 - crates/kobako-wasmtime/src/cache.rs
-- crates/kobako-wasmtime/src/capture.rs
 - crates/kobako-wasmtime/src/config.rs
-- crates/kobako-wasmtime/src/dispatch.rs
+- crates/kobako-wasmtime/src/descriptors.rs
 - crates/kobako-wasmtime/src/driver.rs
 - crates/kobako-wasmtime/src/exports.rs
-- crates/kobako-wasmtime/src/guest_mem.rs
+- crates/kobako-wasmtime/src/guest.rs
+- crates/kobako-wasmtime/src/imports.rs
 - crates/kobako-wasmtime/src/instance_pre.rs
 - crates/kobako-wasmtime/src/invocation.rs
-- crates/kobako-wasmtime/src/io.rs
 - crates/kobako-wasmtime/src/lib.rs
 - crates/kobako-wasmtime/src/limiter.rs
+- crates/kobako-wasmtime/src/preview1.rs
+- crates/kobako-wasmtime/src/preview1/differential.rs
+- crates/kobako-wasmtime/src/preview1/differential/mount.rs
+- crates/kobako-wasmtime/src/preview1/errno.rs
+- crates/kobako-wasmtime/src/preview1/fd.rs
+- crates/kobako-wasmtime/src/preview1/memory.rs
+- crates/kobako-wasmtime/src/preview1/mount_view.rs
+- crates/kobako-wasmtime/src/preview1/mount_view/wrap.rs
+- crates/kobako-wasmtime/src/preview1/path.rs
+- crates/kobako-wasmtime/src/preview1/poll.rs
+- crates/kobako-wasmtime/src/preview1/sock.rs
+- crates/kobako-wasmtime/src/preview1/testsuite-expected.txt
+- crates/kobako-wasmtime/src/preview1/testsuite.rs
 - crates/kobako-wasmtime/src/trap.rs
-- crates/kobako-wasmtime/tests/preamble_flags.rs
-- crates/kobako-wasmtime/tests/snippet_compile.rs
-- crates/kobako-wasmtime/tests/support/mod.rs
-- crates/kobako-wasmtime/tests/unsupported_call.rs
+- crates/kobako-wasmtime/src/wasi.rs
+- crates/kobako-wasmtime/tests/integration/compile_posture.rs
+- crates/kobako-wasmtime/tests/integration/guest_file.rs
+- crates/kobako-wasmtime/tests/integration/main.rs
+- crates/kobako-wasmtime/tests/integration/preamble_flags.rs
+- crates/kobako-wasmtime/tests/integration/snippet_compile.rs
+- crates/kobako-wasmtime/tests/integration/support/mod.rs
+- crates/kobako-wasmtime/tests/integration/unanswered_call.rs
+- crates/kobako-wasmtime/tests/integration/unsupported_call.rs
+- crates/kobako-wasmtime/witx/typenames.witx
+- crates/kobako-wasmtime/witx/wasi_snapshot_preview1.witx
 - data/kobako.wasm
 - ext/kobako/Cargo.toml
 - ext/kobako/extconf.rb
@@ -112,13 +195,21 @@ files:
 - ext/kobako/src/runtime.rs
 - ext/kobako/src/runtime/bridge.rs
 - ext/kobako/src/runtime/errors.rs
+- ext/kobako/src/runtime/escape.rs
+- ext/kobako/src/runtime/filesystem.rs
+- ext/kobako/src/runtime/filesystem/grants.rs
+- ext/kobako/src/runtime/filesystem/ruby.rs
 - ext/kobako/src/runtime/gvl.rs
+- ext/kobako/src/runtime/pinned_value.rs
+- ext/kobako/src/runtime/snapshot.rs
 - lib/kobako.rb
 - lib/kobako/capture.rb
 - lib/kobako/catalog.rb
 - lib/kobako/catalog/extensions.rb
 - lib/kobako/catalog/flags.rb
+- lib/kobako/catalog/grants.rb
 - lib/kobako/catalog/handles.rb
+- lib/kobako/catalog/mount.rb
 - lib/kobako/catalog/services.rb
 - lib/kobako/catalog/snippets.rb
 - lib/kobako/codec.rb
@@ -130,11 +221,13 @@ files:
 - lib/kobako/codec/nesting.rb
 - lib/kobako/codec/state.rb
 - lib/kobako/codec/utils.rb
+- lib/kobako/codec/value_budget.rb
 - lib/kobako/constant_name.rb
 - lib/kobako/context.rb
 - lib/kobako/errors.rb
 - lib/kobako/execution.rb
 - lib/kobako/extension.rb
+- lib/kobako/filesystem.rb
 - lib/kobako/handle.rb
 - lib/kobako/outcome.rb
 - lib/kobako/payload.rb
@@ -144,9 +237,10 @@ files:
 - lib/kobako/sandbox.rb
 - lib/kobako/sandbox_options.rb
 - lib/kobako/snippet.rb
-- lib/kobako/snippet/binary.rb
+- lib/kobako/snippet/bytecode.rb
 - lib/kobako/snippet/source.rb
 - lib/kobako/transport.rb
+- lib/kobako/transport/block_failure.rb
 - lib/kobako/transport/call.rb
 - lib/kobako/transport/dispatcher.rb
 - lib/kobako/transport/error.rb
@@ -163,7 +257,9 @@ files:
 - sig/kobako/catalog.rbs
 - sig/kobako/catalog/extensions.rbs
 - sig/kobako/catalog/flags.rbs
+- sig/kobako/catalog/grants.rbs
 - sig/kobako/catalog/handles.rbs
+- sig/kobako/catalog/mount.rbs
 - sig/kobako/catalog/services.rbs
 - sig/kobako/catalog/snippets.rbs
 - sig/kobako/codec.rbs
@@ -175,11 +271,14 @@ files:
 - sig/kobako/codec/nesting.rbs
 - sig/kobako/codec/state.rbs
 - sig/kobako/codec/utils.rbs
+- sig/kobako/codec/value_budget.rbs
 - sig/kobako/constant_name.rbs
 - sig/kobako/context.rbs
 - sig/kobako/errors.rbs
 - sig/kobako/execution.rbs
 - sig/kobako/extension.rbs
+- sig/kobako/filesystem.rbs
+- sig/kobako/guest_yielder.rbs
 - sig/kobako/handle.rbs
 - sig/kobako/outcome.rbs
 - sig/kobako/payload.rbs
@@ -188,10 +287,12 @@ files:
 - sig/kobako/runtime.rbs
 - sig/kobako/sandbox.rbs
 - sig/kobako/sandbox_options.rbs
+- sig/kobako/snapshot.rbs
 - sig/kobako/snippet.rbs
-- sig/kobako/snippet/binary.rbs
+- sig/kobako/snippet/bytecode.rbs
 - sig/kobako/snippet/source.rbs
 - sig/kobako/transport.rbs
+- sig/kobako/transport/block_failure.rbs
 - sig/kobako/transport/call.rbs
 - sig/kobako/transport/dispatcher.rbs
 - sig/kobako/transport/error.rbs

data/crates/kobako-wasmtime/src/capture.rs

@@ -1,96 +0,0 @@
-//! Per-channel stdout / stderr capture sizing and clipping.
-//!
-//! Two pure helpers shared by the run path: one
-//! sizes the per-run `MemoryOutputPipe`, the other clips a captured
-//! snapshot back to the configured cap and reports whether the cap was
-//! exceeded. Kept channel-agnostic (a function of `cap`, not of which
-//! channel) so a regression that only breaks one channel cannot sneak
-//! through the test that pins them.
-
-/// One byte past the cap, so "wrote exactly cap" and "exceeded cap" stay
-/// distinguishable.
-pub(crate) fn pipe_capacity(cap: Option<usize>) -> usize {
-    match cap {
-        Some(c) => c.saturating_add(1),
-        None => usize::MAX,
-    }
-}
-
-/// Takes the snapshot by value and truncates in place, so the readback
-/// costs one copy out of the pipe rather than two.
-pub(crate) fn clip_capture(mut raw: Vec<u8>, cap: Option<usize>) -> (Vec<u8>, bool) {
-    match cap {
-        Some(c) if raw.len() > c => {
-            raw.truncate(c);
-            (raw, true)
-        }
-        _ => (raw, false),
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::{clip_capture, pipe_capacity};
-
-    // @behavior S-108
-    #[test]
-    fn pipe_capacity_adds_one_when_cap_is_set() {
-        assert_eq!(pipe_capacity(Some(5)), 6);
-        assert_eq!(pipe_capacity(Some(0)), 1);
-    }
-
-    // @behavior S-109
-    #[test]
-    fn pipe_capacity_falls_back_to_usize_max_when_uncapped() {
-        assert_eq!(pipe_capacity(None), usize::MAX);
-    }
-
-    // @behavior S-110
-    #[test]
-    fn pipe_capacity_saturates_at_usize_max() {
-        assert_eq!(pipe_capacity(Some(usize::MAX)), usize::MAX);
-    }
-
-    // @behavior S-111
-    #[test]
-    fn clip_capture_returns_full_bytes_when_under_cap() {
-        let (bytes, truncated) = clip_capture(b"abc".to_vec(), Some(5));
-        assert_eq!(bytes, b"abc");
-        assert!(!truncated);
-    }
-
-    // @behavior S-112
-    #[test]
-    fn clip_capture_does_not_flag_truncation_at_exactly_cap_bytes() {
-        let (bytes, truncated) = clip_capture(b"abcde".to_vec(), Some(5));
-        assert_eq!(bytes, b"abcde");
-        assert!(!truncated);
-    }
-
-    // @behavior S-024
-    #[test]
-    fn clip_capture_clips_to_cap_and_flags_truncation_on_overflow() {
-        // The pipe is sized `cap + 1`, so the snapshot can be at most
-        // 6 bytes when `cap == 5`; that surface is what triggers the
-        // truncation flag.
-        let (bytes, truncated) = clip_capture(b"abcdef".to_vec(), Some(5));
-        assert_eq!(bytes, b"abcde");
-        assert!(truncated);
-    }
-
-    // @behavior S-033
-    #[test]
-    fn clip_capture_treats_none_as_uncapped() {
-        let (bytes, truncated) = clip_capture(b"abcdef".to_vec(), None);
-        assert_eq!(bytes, b"abcdef");
-        assert!(!truncated);
-    }
-
-    // @behavior S-100 S-101
-    #[test]
-    fn clip_capture_handles_empty_input() {
-        let (bytes, truncated) = clip_capture(Vec::new(), Some(5));
-        assert_eq!(bytes, b"");
-        assert!(!truncated);
-    }
-}

data/crates/kobako-wasmtime/src/dispatch.rs

@@ -1,107 +0,0 @@
-//! Host side of the `__kobako_upcall` import: hand the guest's Call to
-//! the bound `DispatchHandler` and write its Reply back into guest memory.
-//! A request under a tag the host does not serve is answered as
-//! unsupported, so a guest asking for a later operation can fall back.
-//!
-//! A failure lands on whoever is answerable for it. A trap the guest
-//! raises during a callback into it ends the invocation as that trap; any
-//! other failure is the guest's or the wire's, so the import answers 0,
-//! which the guest receives as a wire failure.
-//!
-//! Each 0 also writes one `[kobako-dispatch] <reason>` line to stderr,
-//! since the 0 itself carries no reason. It is the one place the driver
-//! logs, and normal operation never reaches it.
-
-use wasmtime::Caller;
-
-use kobako_runtime::error::Trap;
-use kobako_runtime::yielder::Yielder;
-use kobako_transport::abi::pack_ptr_len;
-use kobako_transport::envelope::{Unsupported, Upcall, YieldReply};
-
-use crate::guest_mem;
-use crate::invocation::Invocation;
-
-/// The wasmtime-backed `Yielder`: built per `__kobako_upcall` frame over
-/// that frame's `Caller`, so nested dispatch frames each carry their own and
-/// stack on the Rust call stack with no shared slot.
-struct CallerYielder<'a, 'c> {
-    caller: &'a mut Caller<'c, Invocation>,
-}
-
-impl Yielder for CallerYielder<'_, '_> {
-    fn yield_to_block(&mut self, args: &[u8]) -> Result<YieldReply, Trap> {
-        let bytes = guest_mem::drive_yield(self.caller, args)
-            .map_err(|msg| Trap::Other(msg.to_string()))?;
-        YieldReply::decode(&bytes).map_err(|err| Trap::Other(err.to_string()))
-    }
-}
-
-/// Answer one `__kobako_upcall` call: the packed `(ptr<<32)|len` of the
-/// Reply, 0 for a failure the guest or the wire is answerable for, or the
-/// trap a callback into the guest raised.
-pub(crate) fn handle(
-    caller: &mut Caller<'_, Invocation>,
-    req_ptr: i32,
-    req_len: i32,
-) -> wasmtime::Result<i64> {
-    let answer = try_handle(caller, req_ptr, req_len);
-    if let Some(trap) = caller.data_mut().take_reentry_trap() {
-        return Err(trap);
-    }
-    Ok(answer.unwrap_or_else(|reason| {
-        eprintln!("[kobako-dispatch] {reason}");
-        0
-    }))
-}
-
-fn try_handle(
-    caller: &mut Caller<'_, Invocation>,
-    req_ptr: i32,
-    req_len: i32,
-) -> Result<i64, &'static str> {
-    let req_bytes = guest_mem::read_request(caller, req_ptr, req_len)?;
-    // The driver decodes the core envelope, here and in `CallerYielder`, so
-    // the frontend never sees a frame; the payload inside it stays bytes
-    // the whole way through.
-    let call = match Upcall::decode(&req_bytes) {
-        Ok(Upcall::Call(call)) => call,
-        Ok(_) => {
-            let refusal = Unsupported::new("the host does not serve this request");
-            return write_reply(caller, &refusal.encode());
-        }
-        Err(_) => {
-            return Err(
-                "the guest sent a malformed Call envelope — please report this as a kobako bug",
-            )
-        }
-    };
-
-    // `Kobako::Sandbox` always installs the dispatch handler before
-    // invoking the runtime, so reaching this branch indicates a misuse
-    // rather than a normal control path.
-    let handler = caller
-        .data()
-        .on_dispatch()
-        .ok_or("a Sandbox callback fired outside an active invocation — please report this as a kobako bug")?;
-
-    // Build a frame-scoped yielder over this Caller and hand it to the
-    // handler. The borrow ends with the block, freeing the Caller for
-    // `write_reply`; nested dispatch frames each build their own, so
-    // the LIFO re-entry lives on the Rust stack — no shared slot.
-    let reply = {
-        let mut yielder = CallerYielder { caller };
-        handler.dispatch(call, &mut yielder)
-    }
-    .ok_or(
-        "a Sandbox callback raised an exception instead of returning a fault — please report this as a kobako bug",
-    )?;
-
-    write_reply(caller, &reply.encode())
-}
-
-fn write_reply(caller: &mut Caller<'_, Invocation>, bytes: &[u8]) -> Result<i64, &'static str> {
-    let ptr = guest_mem::write_from_callback(caller, bytes)?;
-    // The write has already held the length to the payload cap.
-    Ok(pack_ptr_len(ptr, bytes.len() as u32) as i64)
-}